|
|
|
|
|
by webmobdev
1635 days ago
|
|
India also has this kind of stupid vague law that makes ethical hacking partly illegal: > The contention is over Clause 7 of the Responsible Vulnerability Disclosure and Coordination Policy, released by CERT-In on September 3. According to the clause, the reporting party must “comply with all the extant laws” like the IT Act, Section 43, which bars unauthorised access to systems. while Section 66 prescribes the corresponding punishment (jail and/or fine). > “Independent security experts may gain unauthorised access to a network when probing a system but they do so to study the vulnerabilities. So while their intent is not malicious, it could be seen as wrong under the IT Act, which is what this policy reinstates,” explains Rohin Garg of Internet Freedom Foundation (IFF), a New Delhi NGO that works to defend digital rights. Source: https://www.deccanherald.com/metrolife/metrolife-on-the-move... More here - https://internetfreedom.in/dont-penalise-cybersecurity-resea... |
|